$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft File: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft (raw, json) Hash identifier: Xnbl9RlKCZO/C5t1rtr6QBBvFJ4rFU9jYcL8FCNpawU= Subject key identifier: 43:C4:EA:FE:89:EE:9B:6E:FB:A3:BF:B4:AD:0F:C2:C2:4B:9E:45:BD Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB Certificate issuer: /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Certificate serial: 70FCFB2FAC32735EA33F5A9AD3F8C2CB13364741 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft Manifest number: 050C Signing time: Sun 20 Jul 2025 01:30:40 +0000 Manifest this update: Sun 20 Jul 2025 01:25:40 +0000 Manifest next update: Wed 23 Jul 2025 10:12:40 +0000 Files and hashes: 1: 3130332e3233352e36362e302f32332d3234203d3e203633343930.roa (hash: cRRAppEwNWUZNxFFrqVntnb4uz3yNuZo0Z65i1BCFzs=) 2: 323430313a333234303a3a2f33322d3438203d3e203633343930.roa (hash: V8s3ZGWRiRsQFE6afavy71EL0CC0o6fC0ADNrXUQYTw=) 3: 1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl (hash: fedGsBRZ5wfdnRoZmnEEVHyQY2Hnw7NSQ5ZTo/HY6bY=) 4: 3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (hash: l7AZH3jA2GmLB8CMnYtZbrYa/W+mf87m8c2rR1yPMgs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 10:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:fc:fb:2f:ac:32:73:5e:a3:3f:5a:9a:d3:f8:c2:cb:13:36:47:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB Validity Not Before: Jul 20 01:25:40 2025 GMT Not After : Jul 23 10:12:40 2025 GMT Subject: CN=43C4EAFE89EE9B6EFBA3BFB4AD0FC2C24B9E45BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:0d:e0:c4:2a:57:f5:fd:e8:50:cd:5e:22:b2: ce:e4:90:e2:c8:05:17:f7:74:b3:5a:38:60:f4:7a: 2f:a5:cb:17:a0:ea:63:9a:69:19:b8:2a:b2:f4:a3: 94:60:e1:c5:4b:d0:db:36:9d:d8:8e:98:c8:74:8c: f7:8c:c5:ef:cc:78:4e:b6:1c:a0:13:c6:7f:bf:f2: 64:69:e9:58:cc:54:f1:32:bc:b5:70:e7:c8:ea:58: 38:0c:db:5b:a7:3c:da:9d:71:b4:34:f1:3b:d6:7c: 8a:03:5f:a4:23:91:da:51:0c:46:7f:8e:17:da:88: ef:74:c8:2d:eb:3c:d9:be:98:af:25:5a:82:4b:40: 97:ae:ca:86:e6:8f:74:15:25:a1:9c:76:c6:c6:5a: 2f:4e:40:80:16:fc:bf:e3:07:5e:26:a3:ad:9b:cb: 4d:40:2f:7c:ef:3d:79:53:3e:60:d4:5d:ea:56:db: 2f:7e:69:24:b9:5b:99:1c:c9:57:53:e7:af:6c:31: 6c:fb:1e:04:de:95:53:cd:a4:64:5e:cf:45:cb:3f: e1:c8:0b:1a:b3:56:56:91:38:61:f5:84:20:cb:8b: 6d:2a:21:a8:42:3a:d9:58:38:de:46:94:9e:44:d1: 85:f5:d6:bf:72:16:a6:ed:52:36:00:7c:74:b9:cf: 12:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C4:EA:FE:89:EE:9B:6E:FB:A3:BF:B4:AD:0F:C2:C2:4B:9E:45:BD X509v3 Authority Key Identifier: keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c0:87:d5:7c:f4:37:de:1f:e3:41:dc:4d:38:cb:fa:68:0d: 32:24:f9:20:59:66:f4:d9:a6:8a:69:d0:79:0a:39:ca:fc:7d: d3:71:e2:88:14:b5:8c:7f:c3:e5:85:64:04:4b:42:09:96:0d: 96:3f:3a:04:56:96:8a:5b:9a:d1:31:8e:36:26:f4:4f:ad:a3: fc:df:1b:13:92:89:c9:aa:39:85:5f:23:df:74:f5:3f:b6:6b: fe:e6:e1:bf:bb:99:54:e3:0f:72:96:b1:5b:1f:1f:93:f5:7e: 9f:10:b8:a4:c4:2a:b2:24:d5:c0:41:0e:87:b0:db:57:03:a1: f4:72:f1:48:6c:ac:b2:9c:d2:2c:47:d5:4c:12:c1:e0:bb:7c: 0f:62:be:f6:4d:40:46:d2:eb:ce:3d:6d:93:82:6c:4d:5f:fd: 2f:8a:2a:52:a0:4f:aa:47:32:a9:cc:2e:66:ab:d3:ec:3f:f4: d7:1a:48:12:7e:d9:15:52:46:50:c4:2c:7a:99:6e:8d:02:19: db:fd:54:02:43:ce:1c:bb:20:cb:7d:20:bf:91:ad:5f:de:ec: 12:97:12:0e:3b:dc:cf:f0:a2:a0:d1:bb:5c:35:69:8c:de:02: 22:e4:24:24:c5:0c:9a:f7:3c:ba:18:c4:6a:d7:48:d8:83:24: 00:eb:69:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPz7L6wyc16jP1qa0/jCyxM2R0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE ODkzRjFGQjAeFw0yNTA3MjAwMTI1NDBaFw0yNTA3MjMxMDEyNDBaMDMxMTAvBgNV BAMTKDQzQzRFQUZFODlFRTlCNkVGQkEzQkZCNEFEMEZDMkMyNEI5RTQ1QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSDeDEKlf1/ehQzV4iss7kkOLI BRf3dLNaOGD0ei+lyxeg6mOaaRm4KrL0o5Rg4cVL0Ns2ndiOmMh0jPeMxe/MeE62 HKATxn+/8mRp6VjMVPEyvLVw58jqWDgM21unPNqdcbQ08TvWfIoDX6QjkdpRDEZ/ jhfaiO90yC3rPNm+mK8lWoJLQJeuyobmj3QVJaGcdsbGWi9OQIAW/L/jB14mo62b y01AL3zvPXlTPmDUXepW2y9+aSS5W5kcyVdT569sMWz7HgTelVPNpGRez0XLP+HI CxqzVlaROGH1hCDLi20qIahCOtlYON5GlJ5E0YX11r9yFqbtUjYAfHS5zxIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ8Tq/onum277o7+0rQ/CwkueRb0wHwYDVR0j BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz RjFGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzllMzYwNTYtZjA5Ny00OWE3LWJk MjMtM2Q3MTFlODlmMzA1LzAvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRC RkFEODkzRjFGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzAh9V89DfeH+NB3E04y/poDTIk+SBZZvTZ popp0HkKOcr8fdNx4ogUtYx/w+WFZARLQgmWDZY/OgRWlopbmtExjjYm9E+to/zf GxOSicmqOYVfI9909T+2a/7m4b+7mVTjD3KWsVsfH5P1fp8QuKTEKrIk1cBBDoew 21cDofRy8UhsrLKc0ixH1UwSweC7fA9ivvZNQEbS6849bZOCbE1f/S+KKlKgT6pH MqnMLmar0+w/9NcaSBJ+2RVSRlDELHqZbo0CGdv9VAJDzhy7IMt9IL+RrV/e7BKX Eg473M/woqDRu1w1aYzeAiLkJCTFDJr3PLoYxGrXSNiDJADraZs= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:34 2025 by rpki-client